Hello everyone,
Do we have to create a eventgen.conf file for all apps. Or, does it automatically come under the relevant apps when the apps are installed? For example, i've installed SplunkAppForFortinet with add-on and cisco_ios apps with add-on. There is a eventgen.conf file in the TA-cisco_ios/default but there is no eventgen.conf in the splunk_TA_fortinet_fortigate.
Could you please help me to find what is the problem?
Not all apps include eventgen configs. For those that lack it, it is up to you to create it.